Running out of file descriptors

[Jens Rantil]

Hi,

I've been running 2.1.10+dfsg-3ubuntu0.12.04.2 for ~165 days now on a
low-volume machine (~20-30 authentication requests per day). FreeRadius
delegates authentication requests to the PAM (which uses Yubico's PAM
module).

Yesterday, FreeRadius suddenly stopped working. Looking into the issue I
noticed that FreeRadius failed to reload configuration with

    Error: Unable to open file "/etc/freeradius/proxy.conf": Too many open
files

Inspecting open files for the process showed me there were ~1012 open
/dev/urandom:

    root at tink-auth-vpn-production:/var/log# lsof|grep freerad|grep
 /dev/urandom|wc -l
    1012

Looks like a classic file resource leak. After restarting the process, no
new /dev/urandom file resources are open. Making two authentication
requests opens up two /dev/urandom. I'm fairly new to FreeRadius. Should I
expect /dev/urandom file descriptors to be pooled between requests? Or
should they be closed between requests? Anyone with input whether this is a
bug in FreeRadius or simply a misconfiguration on my part?

Also, let me know if you'd like me to debug this further.

Thanks,
Jens
-- 

Jens Rantil
Backend Developer @ Tink

Tink AB, Wallingatan 5, 111 60 Stockholm, Sweden
For urgent matters you can reach me at +46-708-84 18 32.